• About the 419 (Advance Fee) scam
• Email addresses used by 419 scammers
• Phone numbers used by 419 scammers
  
• How to report 419 spam to us
• Domains registered by 419 scammers
  
• Company names mentioned in 419 spam
  
• What can you do when you receive 419 spam
  

How the scam works

The advance fee fraud is based on blinding the victim with the prospect of a sudden windfall of an unexpected fortune in order to trick him/her into paying a considerable amount to the scammer. The victim never receives the promised but non-existent fortune.

Below are several examples of mails demanding money at various stages of the scam.

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!

• "transfer charges, Insurance of vital documents" (UKL 3,670.00, Nigeria)
  
• "transfer charges, Insurance of vital documents" (UKL 4,670.00, Nigeria)
  
• "transfer charges, Insurance of vital documents" (USD 6,500.00, Nigeria / South Africa)
  
• "transfer charges, Insurance of vital documents" (UKL 4,550.00, South Africa)
  
• "Initial deposit" (USD 5000) or "Insurance, admin cost" (EUR 978)
  
• "Initial deposit" (UKL 1500) or courier services (UKL 406)
  
• "processing and application fee" (USD 12,500.00, Nigeria)
  
• "tax clearance certificate" (USD 1850)
  
• "Affidavits of lotto claim/Court clearance certificate papers" (EUR 750)
  
• "processment and legal documentation charges" (EUR 928.10)
  
• "processing and notifying your winning with the High Court of Justice" (EUR 850)
  
• "notarisation fee" (EUR 825)
  
• "corporate back taxes for three years" (ZAR / unspecified amount)
  
• "Cost Of Transfer Charge (C.O.T.)" (EUR 1,500)
  
• "refundable deposit fee" (EUR 820)
  
• "Charges for verification process" (EUR 750)
  
• "compulsory processing fee" (EUR 550, Spain)
  
• "courier service and insurance" (UKL 405)
  
• "courier service and insurance" (UKL 405 / USD 785.40)
  
• "courier service" (USD 350, Nigeria)
  
• "consultations and mobilization fees" (USD 5,250)
  
• "Notarization of cashier's check" (USD 875, Nigeria)
  
• "Authentication and filling fee, legal consent and Affidavit" (UKL 1510)
  
• "processing and administrative charges" (EUR 650)
  
• "cost of transfer" (EUR 816)
  
• "application / processing of winning certificate" (EUR 795)
  
• "notarization of cheque" (USD 875)
  
• "account opening/activation" (EUR 1500)
  
• "costs of processing" (EUR 750)
  
• "processing fees" (EUR 860 / USD 1200, Nigeria)
  
• "handling and processing charges" (UKL 4,751)
  
• "MANDATORY NOTORAZATION/PROCESSING CHARGES" (USD 650)
  
• "cost of transfer" (EUR 3850)
  
• "administrative charges, insurance" (EUR 850, Nigeria)
  
• "Endorsement Fee, Affidavits" (EUR 2010, Nigeria)
  
• "courier fee" (UKL 307)
  
• "processing and handling" (UKL 480)
  
• Express Dispatch Courier Ltd. (amount unknown)
  
• "handling,insurance,and settlement of Euro Goverment tax" (UKL 900)
  
• "charges for the transfer" (UKL 686)
  
• Heathrow Courier Services (EUR 220 / USD 270)
  
• "processing / handling fees" (USD 650")
  
• "Netherlands game board" / Henry Patrick Oduwa (EUR 520)
  
• BIZNIZZ COURIER COMPANY (unknown amount)
  
• "compulsory agency processing fee" (EUR 420)
  
• "affidavit, notarization of award documents and stamp duty" (EUR 1500)
  
• "John Terry, DELIVERYMAN COURIER SERVICES" (UKL 190)
  
• "Money laundering certificate" (UKL 1,150)
  
• "SHIPPMENT/COURIER OF YOUR CHEQUE" (EUR 995.00)
  

Payments to 419 scammers are usually made through Western Union. This is a great service for sending money a close relative in an emergency. It is not a service you should use for sending thousands of dollars to a person you only got to know via the internet. Western Union transfers are basically untraceable. If you wire cash by Western Union to someone in say, London then anyone who receives the transfer codes from you can go to one of over 400 different locations in that city, pick up your cash and walk away, never to be identified or seen again.

In a far smaller number of cases payment is requested by bank wire transfer to a designated bank account in Spain, Italy or other countries.

In either case, if you have received payment instructions, forward us a copy of the payment instructions (make sure to include [419] in the subject line).

When do the scammers demand money?

In fake lotteries, the general sequence goes like this, unless the spam recipient is smart enough not to do what the scammers want:

1. "Winning notification" spam is sent to the victim, told to contact agent immediately
   
2. Victims contacts agent
   
3. Agent tells victim to fill in "prize claims forms" with personal details, copy of ID, etc. (don't do this, but you can send us a copy of the email and form!)
   
4. Victim sends filled in forms by fax or email
5. Agent assures victim that that winning is confirmed but then demands payment of fee, claiming that money will be sent within 24 hours after payment.
6. Victim pays advance fee by Western Union or bank wire transfer
7. Victim never receives non-existent lottery prize while scammers look for more victims

"HERITAGE FINANCE LTD"

This was one of the biggest fake lottery scams in late 2004. See our detailed page on this scam:

• "HERITAGE FINANCE LTD / DENNIS HAMMOND"
  

ATTN:THIRD CATEGORY AWARD WINNER:-firstname lastname

Dear Prize Winner,
Acting on the instructions in your claims file with Reference number 3NW-4 and Batch number FN-112, I wish to inform you that payment of your Lottery Claims amounting to £1,500,000.00 being prize money from NATIONWIDE LOTTO UK Third Category draws has been certified by all authorities involved.
Be informed that instruments of payment for the sum of £1,500,000.00 to you, is already in our possession and shall be processed upon meeting the requirements stated below.

You are required to fill a "Lottery Winnings Claim Form" with all necessary details. Follow the link below to download the form

http://www.heritage-finance-ltd.net/lottery.html

After download, kindly print, fill, and send to us either by fax or as an email attachment.
You will also be required to pay a fee of £3,670.00 (Three thousand six hundred and Seventy Great Britain Pounds), or its equivalent in your local currency.
This payment is to cover transfer charges, Insurance of vital documents like prize claim certificate and other transfer documents, handling and opening of account charges.
Note that your total prize claim of £1,500,000.00 has been insured to the real value and as such cannot be deducted from. This is in accordance with section 13(1)(n) of the National Lottery Act of the British Lottery Affairs Commission as adopted in 1993 and amended in 1998. This is to protect winners and to avoid misappropriation of funds.

A certificate of prize claim certificate along side other vital documents will be sent to you via Courier service immediately transfer of your winnings is effected.

Note that your winnings will be transferred within 24hrs after the receipt of both requirements stated above.

Congratulations once more, I shall be awaiting your filled Lottery Winnings Claims Form.

Truly yours,

Mr. Dennis Hammond,
Foreign Department Manager,
Heritage Finance Ltd.
Tel: +44-20-7060-0194
Fax: +44-20-7504-3787
EMAIL: dhammond4@heritagefinance-ltd.org
WEBSITE:www.heritage-finance-ltd.net

NB: For further information about NATIONWIDE LOTTO UK, feel free
to contact them directly;

NATIONWIDE LOTTO UK
SOUTH PARK BUSINESS CENTRE
310 GREEN LANE, ILFORD,
IG1 1XT, ESSEX.
Phone: +44-70 4010 6614
Fax: +44-20 8181 6406
WEBSITE: www.nationwidelottuk.com

As a winner, you are allowed to login into their website to
confirm your winnings.

Note: This scammer has also used the following email addresses:

• dhammond10@heritage-financeltd.net
• dhammond11@heritage-financeltd.org
• dhammond12@heritage-financeltd.org
• dhammond2@heritagefinance-ltd.org
• dhammond4@heritagefinance-ltd.org
• dhammond5@heritagefinance-ltd.org
• dhammond7@heritagefinanceltd-uk.com
• heritagefinance@claimsagentheritagefinance-ltd.org

"WORLD WIDE CASH CHANGE LTD / PRESTIGIUOS LOTTERY U.K"
(click above link for full details on the scam)

The scammers have registered websites for the fake lottery and fake claims agent:

• http://www.prestigiouslotteryuk.com (complaints to: abuse@troublefreehosting.com)
  
• http://www.prestigiouslottuk.com (complaints to: abuse@1and1.com)
  
• http://www.world-widecashchange.net (complaints to: abuse@msn.com)
  

Example #1:

ATTN:

REFERENCE: PL44125645

Dear prize winner,

Acting on the instructions in your claims file with Reference number 
PL44125645, I wish to inform you that payment of your Lottery Claims 
amounting to £4,800,000.00 being prize money from prestigious lottery 
U.K.  
Cash 5 draws has been certified by all authorities involved.

Be informed that instruments of payment for the sum of £4,800,000.00 
to you, 
is already in our possession and shall be processed upon your meeting 
the 
requirements stated below. You are required to fill a "Lottery 
Winnings 
Claim Form" with all necessary details.


      LOTTERY WINNING CLAIM FORM 7
REFERENCE NO: _____________ TICKET NO: _______________
FULL NAME:........................................
COMPANY NAME:.....................................
FULL ADDRESS:.....................................
.................................................
................................................
TEL: ...........................
FAX:............................
YOUR EMAIL: .............................
Reply to : foreignservicedirector7@world-widecashchange.net

ACCOUNT COORDINATES (Details of the account where you
want your funds transferred):
.....................................................
.....................................................
....................................................
BRIEF DESCRIPTION OF COMPANY/ INDIVIDUAL:
....................................................
....................................................
....................................................
________________               __________________
Signature                      Date

Carefully fill out this form and send back either by
fax or by email

You will also be required to pay a fee of £4,670.00 (Four thousand six 
hundred and Seventy Great Britain Pounds), or its equivalent in your 
local 
currency. This payment is to cover transfer charges, Insurance of 
vital 
documents like prize claim certificate and other transfer documents, 
handling and opening of account charges.

Note that your total prize claim of £4,800,000.00 has been insured to 
the 
real value and as such cannot be deducted from. This is in accordance 
with 
section 12(7) (b) of the national lottery act of the British Lottery 
Affairs 
Commission as adopted in 1996 and amended in 2001. This is to protect 
winners and to avoid misappropriation of funds.

A certificate of prize claim certificate along side other vital 
documents 
will be sent to you via Courier service immediately transfer of your 
winnings is effected.

Your winnings will be transferred within 24hrs after the receipt of 
both 
requirements stated above. Congratulations once more, I shall be 
awaiting 
your filled Lottery Winnings Claims Form.

Sincerely yours,

Mr. Gary Blackwell
WORLD WIDE CASH CHANGE LTD
TEL:    +44 2000000177
    +44 7005981869
FAX:    +44 2075043761
    +44 7005982095
EMAIL:foreignservicedirector7@world-widecashchange.net
WEBSITE: www.worldwidecashchange.net



NB: For further information about £4,670.00 (Four thousand six hundred 
and 
Seventy Great Britain Pounds) U.K, feel free to contact them directly;

LOTTERY COORDINATOR
PRESTIGIUOS LOTTERY U.K
73 BELGRAVE ROAD
LONDON
ENGLAND
SW1V 2BB
UNITED KINGDOM
TEL: 447005947683
FAX: 447005963708
WEBSITE: www.prestigiouslotteryuk.com

Example #2:

Received: from  hotmail.com (bay23-f18.bay23.hotmail.com [64.4.22.68]) by
 rly-xn01.mx.aol.com (v103.7) with ESMTP id MAILRELAYINXN110-62c41b6351b11a;
 Tue, 07 Dec 2004 17:56:30 -0500
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Tue, 7 Dec 2004 02:54:00 -0800
Message-ID: <BAY23-F180AA6B8B787DCEBFA9C02C0B50@phx.gbl>
Received: from 82.206.150.211 by by23fd.bay23.hotmail.msn.com with HTTP;
	Tue, 07 Dec 2004 10:53:24 GMT
X-Originating-IP: [82.206.150.211]
X-Originating-Email: [foreignservicedirector7@world-widecashchange.net]
X-Sender: foreignservicedirector7@world-widecashchange.net
From: "FOREIGN SERVICE DIRECTOR" <foreignservicedirector7@world-widecashchange.net>
To: ################
Subject: payment instruction
Date: Tue, 07 Dec 2004 10:53:24 +0000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_67b4_1709_1947"
X-OriginalArrivalTime: 07 Dec 2004 10:54:00.0954 (UTC) FILETIME=[0F3D25A0:01C4DC4B]
X-AOL-IP: 64.4.22.68



------=_NextPart_000_67b4_1709_1947
Content-Type: text/plain; format=flowed

ATTENTION:surname firstname

Dear Prize Winner,

We are in receipt of your completed verification form and it has been 
forwarded to our accounts department for verification and documentation.

You are advised to immediately make arrangements to pay our processing fees, 
amounting £4,670.00 (Four thousand six hundred and Seventy Great Britain 
Pounds), or its equivalent in United States dollars, via money gram money 
transfer through our Claims representing officer in the United States. Find 
below full details of receiver;

NAME OF RECEIVER:     Mr. Francis Thompson
Address of receiver:  7222 Bellerive 2705
                      Houston, Texas 77036
Tel:                  1-713-589-7041
Fax:                  1- 832-550-2547
Email:fran_thomp@worldwidecashchangeltduk.net

Please note that you are to send the receipt of payment via email attachment 
or fax immediately after making the payment.

We shall conclude arrangements and transfer your prize money into your 
account upon confirmation of your processing fees.

A Pro Forma invoice for this payment is sent as an attachment with this 
email. Please download it for your perusal.

I await your response.

Sincerely yours,

Mr. Gary Blackwell
WORLD WIDE CASH CHANGE LTD
TEL:    +44 2070600695
TEL:    +44 7040116624
FAX:    +44 2070600698
EMAIL:
foreignservicedirector7@world-widecashchange.net


------=_NextPart_000_67b4_1709_1947
Content-Type: application/msword; name="Invoice.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Invoice.doc"

0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAPgAAAAAA
AAAAEAAAQAAAAAEAAAD+////AAAAAD0AAAD/////////////////////////////////////
////////////////////////////////////////////////////////////////////////
...
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAA=

------=_NextPart_000_67b4_1709_1947--

WHOIS lookup for 82.206.150.211:

     inetnum:      82.206.128.0 - 82.206.255.255
     org:          ORG-IA67-RIPE
     netname:      Uk-INTELSAT-20031126
     descr:        PROVIDER Local Registry
     descr:        Intelsat
     country:      GB
     admin-c:      IRA4-RIPE
     tech-c:       IRTC1-RIPE
     tech-c:       CQ37-RIPE
     tech-c:       AT1875-RIPE
     status:       ALLOCATED PA
     mnt-by:       RIPE-NCC-HM-MNT
     mnt-lower:    AS22351-MNT
     mnt-routes:   AS22351-MNT
     notify:       noc@intelsat.com
     changed:      hostmaster@ripe.net 20031126
     changed:      hostmaster@ripe.net 20040608
     source:       RIPE
     
     organisation: ORG-IA67-RIPE
     org-name:     Intelsat
     org-type:     LIR
     address:      Intelsat
     address:      Chiswick Park, Building 3
     address:      566 Chiswick High Road
     address:      London
     address:      W45YA
     address:      United Kingdom
     phone:        +44 208 899 6035
     phone:        +1 202 944 6792
     phone:        +1 202 944 6958
     fax-no:       +1 202 944 6955
     e-mail:       augustin.traore@intelsat.com
     e-mail:       chuan.qin@intelsat.com
     admin-c:      AT1875-RIPE
     admin-c:      IRA4-RIPE
     admin-c:      IRTC1-RIPE
     admin-c:      CQ37-RIPE
     mnt-ref:      AS22351-MNT
     mnt-ref:      RIPE-NCC-HM-MNT
     mnt-by:       RIPE-NCC-HM-MNT
     changed:      hostmaster@ripe.net 20040415
     source:       RIPE
     
     role:         Intelsat Ripe Admin
     address:      Intelsat Global Service Corporation
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     e-mail:       noc@intelsat.com
     e-mail:       bgp@Intelsat.com
     admin-c:      AT1875-RIPE
     tech-c:       CQ37-RIPE
     nic-hdl:      IRA4-RIPE
     remarks:
     remarks:      *************************************************************
     remarks:      *                                                           *
     remarks:      *  This is a generic ROLE object for an Intelsat Admin      *
     remarks:      *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:      *  issues should be directed to the NOC or BGP email-boxes, *
     remarks:      *  which will forward them appropriately.  For operational  *
     remarks:      *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:      *                                                           *
     remarks:      *                     noc@intelsat.com                      *
     remarks:      *                     +1 202 944 6792                       *
     remarks:      *                                                           *
     remarks:      *  For BGP related issues, send an email to:                *
     remarks:      *                                                           *
     remarks:      *                     bgp@intelsat.com                      *
     remarks:      *                                                           *
     remarks:      *  For issues of network abuse, including spam, please send *
     remarks:      *  email to Intelsat at:                                    *
     remarks:      *                                                           *
     remarks:      *                    abuse@intelsat.com                     *
     remarks:      *                                                           *
     remarks:      *************************************************************
     remarks:
     notify:       Augustin.Traore@Intelsat.com
     notify:       chuan.qin@intelsat.com
     changed:      Daniel.Campbell@Intelsat.com 20021216
     changed:      tac.ops@intelsat.com 20031023
     source:       RIPE
     
     role:         Intelsat RIPE Technical Contact
     address:      Intelsat Global Service Corporation
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     e-mail:       abuse@intelsat.com
     e-mail:       noc@intelsat.com
     e-mail:       bgp@Intelsat.com
     e-mail:       Chuan.Qin@Intelsat.com
     e-mail:       Augustin.Traore@Intelsat.com
     admin-c:      IRA4-RIPE
     tech-c:       CQ37-RIPE
     nic-hdl:      IRTC1-RIPE
     remarks:
     remarks:      *************************************************************
     remarks:      *                                                           *
     remarks:      *  This is a generic ROLE object for an Intelsat Technical  *
     remarks:      *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:      *  issues should be directed to the NOC or BGP email-boxes, *
     remarks:      *  which will forward them appropriately.  For operational  *
     remarks:      *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:      *                                                           *
     remarks:      *                     noc@intelsat.com                      *
     remarks:      *                     +1 202 944 6792                       *
     remarks:      *                                                           *
     remarks:      *  For BGP related issues, send an email to:                *
     remarks:      *                                                           *
     remarks:      *                     bgp@intelsat.com                      *
     remarks:      *                                                           *
     remarks:      *  For issues of network abuse, including spam, please send *
     remarks:      *  email to Intelsat at:                                    *
     remarks:      *                                                           *
     remarks:      *                    abuse@intelsat.com                     *
     remarks:      *                                                           *
     remarks:      *************************************************************
     remarks:
     notify:       Augustin.Traore@Intelsat.com
     notify:       chuan.qin@intelsat.com
     changed:      Daniel.Campbell@Intelsat.com 20021216
     changed:      tac.ops@intelsat.com 20040116
     source:       RIPE
     
     person:       Chuan Qin
     address:      Intelsat
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     phone:        +1 202 944 8530
     nic-hdl:      CQ37-RIPE
     e-mail:       Chuan.Qin@Intelsat.com
     changed:      TAC.OPS@Intelsat.com 20031126
     source:       RIPE
     
     person:       Augustin Traore
     address:      3400 International Drive NW,
                   Washington DC 20008-3006
     phone:        +703-944-7033
     e-mail:       augustin.traore@intelsat.com
     nic-hdl:      AT1875-RIPE
     mnt-by:       AS22351-MNT
     changed:      TAC.OPS@Intelsat.com 20031126
     source:       RIPE

"GOLDEN REEF LOTTERY / SOUTHTRUST INVESTMENT PTY. / Harry Robben"

Return-Path: <mrhrobben@southtrustltd.com>
Received: from  rly-yi04.mx.aol.com (rly-yi04.mail.aol.com [172.18.180.132])
 by ################# (v#####) with ESMTP id MAILINYI14-7c941bd9f1d247;
 Mon, 13 Dec 2004 08:55:01 -0500
Received: from  hotmail.com (bay23-f15.bay23.hotmail.com [64.4.22.65])
 by rly-yi04.mx.aol.com (v103.7) with ESMTP id MAILRELAYINYI47-7c941bd9f1d247;
 Mon, 13 Dec 2004 08:54:37 -0500
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 13 Dec 2004 03:18:07 -0800
Message-ID: <BAY23-F1583CC4DC5F4DB065EDC12A9AB0@phx.gbl>
Received: from 81.199.85.129 by by23fd.bay23.hotmail.msn.com with HTTP;
	Mon, 13 Dec 2004 07:58:20 GMT
X-Originating-IP: [81.199.85.129]
X-Originating-Email: [mrhrobben@southtrustltd.com]
X-Sender: mrhrobben@southtrustltd.com
From: "Harry Robben" <mrhrobben@southtrustltd.com>
To: #################
Subject: CLAIMS REQUIREMENT/PROCESSING FORM
Date: Mon, 13 Dec 2004 07:58:20 +0000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_3e16_65d8_51ad"
X-OriginalArrivalTime: 13 Dec 2004 11:18:07.0085 (UTC) FILETIME=[6BADB9D0:01C4E105]
X-Mailer: Unknown (No Version)


------=_NextPart_000_3e16_65d8_51ad
Content-Type: text/plain; format=flowed

ATTN:  THIRD CATEGORY WINNER

We are in receipt of your claims file, from GOLDEN REEF LOTTERY with 
reference Number REFERENCE NO: ST-A542-5 and BATCH NO: 228-GP. Be informed 
that we have in our possession instruments of payment for the sum of 
US$2,000,000.00 to you. You will be required to fill the "Lottery Winnings 
Claim Form"  with all necessary details, after download, kindly print, fill, 
and send back either by fax or as an email attachment.

Please find attacted Lottery Winnings Claim Form (LWCF)

You will also be required to pay a fee of USD6,500.00 (Six thousand five 
hundred United States dollars only), or it’s equivalent in your local 
currency. This payment is to cover transfer charges, Insurance of vital 
documents like prize claim
certificate and other transfer documents, handling and opening of account 
charges.

Note that your total prize claim of US$2,000,000.00 has been insured to it's 
value and as such cannot be deducted from.This is in accordance with section 
13(1)(n) of the national gambling act as adopted in 1993 and amended on 3rd 
July 1996 by the constitutional assembly. This is to protect winners and to 
avoid misappropriation of funds.

A certificate of prize claim along side other vital documents will be sent 
to you via Courier service immediately transfer of your winnings is 
effected.

Note that your winnings will be transferred within 24hours after the receipt 
of all the requirements. I shall be awaiting your response.

Truly yours,
Mr. Harry Robben.
CLAIMS DEPT. MANAGER,
SOUTHTRUST INVESTMENT PTY.
PHONE: +27 838 919033
FAX: +27 115 076331
EMAIL: mrhrobben@southtrustltd.com
www.southtrust.co.za


------=_NextPart_000_3e16_65d8_51ad
Content-Type: application/msword; name="LWCF.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="LWCF.doc"

0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAATwAAAAAA
AAAAEAAAUQAAAAEAAAD+////AAAAAE4AAAD/////////////////////////////////////
....
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

------=_NextPart_000_3e16_65d8_51ad--

     inetnum:      81.199.84.0 - 81.199.87.255
     netname:      CIDR-COMMUNICATION-01
     descr:        Internet service provider
     country:      NG
     admin-c:      TECH7-RIPE
     tech-c:       TECH7-RIPE
     status:       ASSIGNED PA
     notify:       lir@ipplanet.net
     mnt-by:       AS12491-MNT
     changed:      lir@ipplanet.net 20040902
     source:       RIPE
     
     person:       Tech Supernet300
     address:      21 Mobolaji Bank
     address:      Anthony Way Ikeja
     address:      Lagos
     address:      Nigeria
     phone:        + 234 1 4976493
     e-mail:       admin@supernet300.com
     nic-hdl:      TECH7-RIPE
     changed:      lir@ipplanet.net 20040902
     source:       RIPE

The claims form (LWCF.doc) was created by someone using the user name "GUNIT". The document was last printed out on 2004-10-29.

"GREENER PASTURES LOTTERY / "1ST MOVES INTERNATIONAL (SHIPIT), LONDON"

The scammers, here operating using a free webmail account at winning.com, give the victim a choice of either sending them 978 euro or $5000. Either money will be lost of course.

The larger amount is supposed to be a minimum deposit for opening an account at an online bank, which is fake of course. After sending the money, the victim will never gain access to his virtual bank account and any complaints will be ignored.

Here's the contact information for the agent:

CONTACT: STEVEN BROWN,
CUSTOMER SUPPORT UNIT - CSU,
1ST  MOVES INTERNATIONAL (SHIPIT), LONDON.
FAX: 44 – 20 79003038
TEL: 44 – 77 46479156
EMAIL:steven_shipit@winning.com

"UK NATIONAL LOTTO"

The scammers, here operating using a free webmail account at mail2UK.com, give the victim a choice of either paying either £406 or £1500. Either money will be lost of course.

The £1500 is supposed to be a minimum deposit for opening an account at an online bank. The bank does not exist. If cash is sent, the criminals posing as a bank simply pocket it and ignore the new "customer". The victim will never gain access to his virtual bank account and any complaints will be disregarded. The wording of the following scam email is bears similarities to "ROYAL BAY SECURITY" scam. Here's the scam email:

From: uknational lotto [mailto:uknationallo@mail2Uk.com]
To: emailaddress
Sent: Tuesday, December 14, 2004 3:11 PM
Subject: CLAIMS OPTIONS


Dear Firstname Lastname,
We hereby inform you that we have processed your payment and your cheque is ready for disbursement, along with your winnings certificate. In this regard you are to choose from the options below the one that best suites you on how you wish to receive your funds, also your funds deposited with us is not in liquid form but in Bank Cheques, this advice complies with the Anti-Fraud section 2,sub section (iv) of the procedural manual of the funds disbursement agreement existing between courier companies and the British Government.

1. Come down in person to collect your funds at any of our offices in THE UNITED KINGDOM or SPAIN. You will be required to present a valid International Passport as proof of Identification.

2. Have our affiliate courier company send the cheques to you. In consonance with our policy in this regard, be advised that if you opt for the cheques to be couriered UK National Lottery however exempts itself from all liability related to this service. The cost of this service would be borne by you; this is a prerequisite for this option. You will be referred to our affiliate courier company so that you can make enquires concerning modalities,and charges. The reason for the courier option is for the fact of double taxation, that is if you are to come over to sign for the release of your winnings personally, you would have to pay taxes on the winnings in Britain and then go and pay taxes on the same winnings in your country once the funds get there.

3. Have your winning transferred through an online banking system to you account from our corresponding bank, but this will attract an initial online opening balance of a minimum 1,500.00GBP .This way you shall open an account with the bank and have the funds liquefied first before the onward transfer to another account that you may require.
This is the main reason why we would advise that you take the courier option,you have not collected the winnings until you sign for it and the only way you can sign for it via courier is when you have taken delivery of the parcel containing the winning cheques and certificates of winning. This would be in your country, the options are open to you and we are there to serve you, no matter the option taken.
We expect that you will notify us of your choice upon receipt of this message so that appropriate arrangement can be put in place.

Regards,
Mr Howard Collins
..................................................................................................................................................................
This email and its attachments are confidential and intended for the exclusive use of the addressee(s).This email and its attachments may also be privileged or protected by legal rules. If you have received this by mistake please let us know by reply immediately and destroy the email and its attachments without reading, copying or forwarding the contents.

_______________________________________________________________
Get the FREE email that has everyone talking at http://www.mail2world.com

Option 1 (picking up the winnings in person) is discouraged by the scammers, because they don't actually have offices in the UK or Spain, the countries they claim to be operating in.

Option 2 (courier service) costs £406. This money is wired to pay for a fake courier service wich will either not deliver at all or deliver a worthless fake check that bounces when cashed.

Option 3 (private bank) costs £1500 in minimum deposits. Since "Newcastle Trust Private Bank" is a fake bank, any money wired by Western Union will be pocketed by the criminals. There is no bank, no bank acount and no winnings:

Dear Firstname Lastname, This is to inform you that we acknowledge the online wire transfer option you have chosen for your winnings to be transferred to you.

Based on this your winning cheques has been forwarded to our Corresponding online bank for onward transfer of your funds to you

Find below the contact details of the online bank,where you are to set up the account for the transfer of your winnings,i would suggest you contact the bank immediately and conclude the account set up.
You are to notify us as soon as the account is actively set up,to enable us update our records accordingly.

Newcastle Trust Private Bank
97/103, Osborne Road Jesmond
Newcastle Upon Tyne NE2 2AT
www.newcastletrust.com

Accounts officer: Mr. Bonny Varsat
Phone: +44-207-060-1448
Fax: +44-870-131-0463
Email: enquiries@newcastletrust.com

I shall be awaiting your urgent response.

Regards,
Howard Collins
_______________________________________________________________
Get the FREE email that has everyone talking at http://www.mail2world.com

The email was sent ("Received: from [80.179.242.228] by mail2Uk.com with HTTP; 12/17/2004 11:47:59 PM PST") via a satellite broadband provider in Israel that covers Nigeria and other countries. It's interesting that this ISP also lies about which country it's based in, claiming to be in Great Britain even though it's really in Israel:

     inetnum:      80.179.242.224 - 80.179.242.255
     netname:      Gilat-ART2036
     descr:        Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il
     country:      GB
     admin-c:      DR5299-RIPE
     tech-c:       DR5299-RIPE
     status:       ASSIGNED PA
     notify:       lir@linux.goldenlines.net.il
     changed:      lir@linux.goldenlines.net.il 20040617
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     source:       RIPE
     
     route:        80.179.128.0/17
     descr:        Golden Lines
     origin:       AS9116
     mnt-by:       AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20020711
     source:       RIPE
     
     role:         DNS REG
     address:      25 Hsivim st. Petach-Tiikva, Israel
     e-mail:       dnsreg@012.net.il
     trouble:      abuse@012.net.il
     admin-c:      GE2074-RIPE
     tech-c:       IB737-RIPE
     tech-c:       AG914-RIPE
     nic-hdl:      DR5299-RIPE
     notify:       lir@linux.goldenlines.net.il
     changed:      lir@linux.goldenlines.net.il 20030715
     mnt-by:       AS9116-MNT
     source:       RIPE

        Domain Name: NEWCASTLETRUST.COM
        Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
        Whois Server: whois.dns.com.cn
        Referral URL: http://www.dns.com.cn
        Name Server: NS1.DNS.COM.CN
        Name Server: NS2.DNS.COM.CN
        Status: REGISTRAR-LOCK
        Updated Date: 26-nov-2004
        Creation Date: 01-oct-2004
        Expiration Date: 01-oct-2005

Email from the fake "bank":

Received: from hotmail.com (bay23-f6.bay23.hotmail.com[64.4.22.56]
 (misconfigured sender))
          by sccrmxc17.comcast.net (sccrmxc17) with ESMTP
          id <20041221043101s1700fir49e>; Tue, 21 Dec 2004 04:31:01 +0000
X-Originating-IP: [64.4.22.56]
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 20 Dec 2004 20:31:00 -0800
Message-ID: <BAY23-F640039A086AA62DB9AFF1AAA30@phx.gbl>
Received: from 80.179.242.228 by by23fd.bay23.hotmail.msn.com with HTTP;
	Tue, 21 Dec 2004 04:30:48 GMT
X-Originating-IP: [80.179.242.228]
X-Originating-Email: [bonnyvarsat@newcastlebank.net]
X-Sender: bonnyvarsat@newcastlebank.net
From: "Bonny Varsat" <bonnyvarsat@newcastlebank.net>
To: emailaddress
Bcc: 
Subject: ACCOUNT OPENING PROCEDURE
Date: Tue, 21 Dec 2004 04:30:48 +0000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_1e21_3811_6614"
X-OriginalArrivalTime: 21 Dec 2004 04:31:00.0778 (UTC) FILETIME=[DFC510A0:01C4E715]

This is a multi-part message in MIME format.

------=_NextPart_000_1e21_3811_6614
Content-Type: text/plain; format=flowed

ATTENTION: Firstname Lastname                        21-12-2004

WE HAVE VERIFIED YOUR CLAIMS AND THE PROCEDURE WILL INVOLVE YOUR OPENNING AN 
ONLINE ACCOUNT WITH US INTO WHICH WILL BE CREDITED YOUR WINNINGS. YOU MAY 
THEN TRANSFER YOUR FUNDS FROM THE ONLINE ACCOUNT TO ANY ACCOUNT OF YOUR 
CHOICE ANYWHERE IN THE WORLD. PLEASE FIND ATTACHED TO THIS EMAIL THE ACCOUNT 
OPENNING FORM WHICH YOU ARE TO FILL AND RETURN BACK TO US IMMEDIATELY.

NOTE THAT ALL ACCOUNTS NOT PROPERLY SETUP BY THE 24TH OF DECEMBER 2004 WILL 
HAVE TO BE SUSPENDED UNTIL THE NEXT FISCAL FINANCIAL YEAR OF 2005 AS WE ARE 
ROUNDING UP ACCOUNTS FOR THIS YEAR.

YOU ARE TO CONFIRM THE RECEIPT OF THIS MAIL IMMEDIATELY.

BONNY VARSAT
FOREX ALLOCATION UNIT MANAGER
NEWCASTLE TRUST PRIVATE BANK
www.newcastletrust.com
Phone: +44-207-060-1448
Fax: +44-870-131-0463

As you can see the email from the "bank" arrived from the same IP address (80.179.242.228) as the mail by "Howard Collins". What a remarkable coincidence ;-)

Here is a money demand from "METRO SECURITIES":

From: "oliver bundu" <metrosecurities@consultant.com>
To: "Firstname Lastname" <victimaddress>
Sent: Thursday, 06 January, 2005 20:54
Subject: Re: Fw: ACCOUNT RESTRICTION

Dear Sir,

The processing and application fee for the Security Clearance is USD$12,500.00. Payment should be made by Moneygram in two equal installments, to our accounts department in Toronto, Canada, using the information below:

Pay to:

NAME: 1. ANA GREENE

2. ANTHONY CROFT

ADDRESS: 1242 Wellington Street, West, Toronto, ON M5J2N8
Tel/fax: 416-760-2007




LOCATION: TORONTO, CANADA


Payment should be made using the name above. As soon as payment is received, your account will be fully activated and the hold will be removed within 24hours. Call this toll free number (for residents in the unitd states) 1 800 933 3278, to get the nearest location of moneygram to you. We normally use this means of payment, because the fund is received here in 15minutes

Contact me immediately payment is effected.



--
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://www.mail.com/?sr=signup

Return-Path: <metrosecurities@consultant.com>
Delivered-To: victimaddress
Received: (qmail 396534 invoked from network); 6 Jan 2005 11:54:45 -0000
Received: from unknown ([172.18.5.85]) (envelope-sender <>)
          by qmail6.highway.telekom.at (qmail-ldap-1.03) with QMQP
          for <>; 6 Jan 2005 11:54:45 -0000
Received: (qmail 185216 invoked from network); 6 Jan 2005 11:54:44 -0000
Received: from webmail-outgoing.us4.outblaze.com ([205.158.62.67])
 (envelope-sender <metrosecurities@consultant.com>)
          by email08.aon.at (qmail-ldap-1.03) with SMTP
          for <victimaddress>; 6 Jan 2005 11:54:44 -0000
Received: from wfilter.us4.outblaze.com (wfilter.us4.outblaze.com [205.158.62.180])
	by webmail-outgoing.us4.outblaze.com (Postfix) with QMQP id 440BB18001A8
	for <victimaddress>; Thu,  6 Jan 2005 11:54:44 +0000 (GMT)
X-OB-Received: from unknown (205.158.62.81)
  by wfilter.us4.outblaze.com; 6 Jan 2005 11:54:44 -0000
Received: by ws1-2.us4.outblaze.com (Postfix, from userid 1001)
	id 2A3991F50B1; Thu,  6 Jan 2005 11:54:44 +0000 (GMT)
Content-Type: text/html; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Received: from [195.166.237.40] by ws1-2.us4.outblaze.com with http for
    metrosecurities@consultant.com; Thu, 06 Jan 2005 06:54:44 -0500
From: "oliver bundu" <metrosecurities@consultant.com>
To: "Firstname Lastname" <victimaddress>
Date: Thu, 06 Jan 2005 06:54:44 -0500
Subject: Re: Fw: ACCOUNT RESTRICTION
X-Originating-Ip: 195.166.237.40
X-Originating-Server: ws1-2.us4.outblaze.com
Message-Id: <20050106115444.2A3991F50B1@ws1-2.us4.outblaze.com>

This money demand arrived from Nigeria (IP address 195.166.237.40):

     inetnum:      195.166.237.0 - 195.166.237.255
     netname:      LINKSERVE
     descr:        IP pool for satellite hub
     country:      NG
     admin-c:      TO219-RIPE
     tech-c:       TO219-RIPE
     status:       ASSIGNED PA
     mnt-by:       AS8770-MNT
     mnt-lower:    AS8770-MNT
     mnt-routes:   AS8770-MNT
     changed:      obinna@linkserve.net 20040906
     source:       RIPE
     
     person:       Tunde Ogedengbe
     address:      Linkserve
     address:      22 Akin Adesola
     address:      FATB Plaza
     address:      Victoria Island
     address:      Lagos Nigeria
     phone:        +234 1 2623900
     fax-no:       +234 1 262 3906
     e-mail:       tunde@linkserve.com.ng
     nic-hdl:      TO219-RIPE
     notify:       tunde@linkserve.com.ng
     changed:      hostmaster@ripe.net 19971217
     source:       RIPE

Here is a money demand from a "SANTA LUCIA" "claims agent":

Return-Path: <santalucia1964@yahoo.com>
Received: from 207.115.57.39  (EHLO ylpvm08.prodigy.net) (207.115.57.39)
  by mta829.mail.sc5.yahoo.com with SMTP; Wed, 15 Dec 2004 05:32:32 -0800
X-Originating-IP: [206.190.39.144]
Received: from web52606.mail.yahoo.com (web52606.mail.yahoo.com [206.190.39.144])
	by ylpvm08.prodigy.net (8.12.10 083104/8.12.10) with SMTP id iBFDWJOX022309
	for <emailaddress>; Wed, 15 Dec 2004 08:32:19 -0500
Received: (qmail 42627 invoked by uid 60001); 15 Dec 2004 13:32:31 -0000
Received: from [80.58.2.46] by web52606.mail.yahoo.com via HTTP;
 Wed, 15 Dec 2004 05:32:31 PST
Date: Wed, 15 Dec 2004 05:32:31 -0800 (PST)
From: santa lucina 
Subject: YOUR PAYMENT
To: emailaddress
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1960302830-1103117551=:42224"

     inetnum:      80.58.0.0 - 80.58.24.255
     netname:      RIMA
     descr:        Telefonica de Espana SAU
     descr:        Red de servicios IP
     descr:        Spain
     country:      ES
     admin-c:      LJP5-RIPE
     tech-c:       FLT14-RIPE
     status:       ASSIGNED PA
     remarks:      ***************************************************
     remarks:      For ABUSE/SPAM/INTRUSION issues
     remarks:      PLEASE CONTACT THROUGH LINK
     remarks:      http://www.telefonicaonline.com/nemesys/
     remarks:      or send mail to nemesys@telefonica.es
     remarks:      any mail to adminis.ripe@telefonica.es will be ignored
     remarks:      ***************************************************
     notify:       adminis.ripe@telefonica.es
     mnt-by:       MAINT-TdE
     changed:      adminis.ripe@telefonica.es 20020530
     changed:      adminis.ripe@telefonica.es 20030924
     source:       RIPE
     
     route:        80.58.0.0/16
     descr:        RIMA (Red IP Multi Acceso)
     origin:       AS3352
     mnt-by:       MAINT-AS3352
     changed:      adminis.ripe@telefonica.es 20010622
     changed:      adminis.ripe@telefonica.es 20020206
     changed:      adminis.ripe@telefonica.es 20030401
     source:       RIPE
     
     person:       L Jimenez
     address:      TELEFONICA DE ESPANA
     address:      Emilio Vargas, 4
     address:      28043-MADRID
     address:      SPAIN
     phone:        +34 91 5846497
     fax-no:       +34 91 5842650
     e-mail:       adminis.ripe@telefonica.es
     nic-hdl:      LJP5-RIPE
     mnt-by:       MAINT-TdE
     remarks:      ***************************************************
     remarks:      For ABUSE/SPAM/INTRUSION issues
     remarks:      PLEASE CONTACT THROUGH LINK
     remarks:      http://www.telefonicaonline.com/nemesys/
     remarks:      or send mail to nemesys@telefonica.es
     remarks:      any mail to adminis.ripe@telefonica.es will be ignored
     remarks:      ***************************************************
     notify:       ah@telfonica.es
     changed:      adminis.ripe@telefonica.es 20020530
     source:       RIPE

Subject: NON RESIDENCE AWARD CLAIM FORM-BF


ATTN:

We have received your respond along with your winning informations; we apologized for the delay of your prize payment, it was due to fire out brake in our office, nevertheless the International Functionaries had made your dream come true after their research.

Please view the Attached Non Residence Claim/Award Form and fill it out carefully then comply with the instruction of your file officer Mr.Edward Coleman for the processing of the Affidavits of lotto claim/Court clearance certificate as this will enable speeding processing of your Award winning.
Be advised that upon completion of the required legal documentation; which takes 24- 48 hours, your file will be passed across to the paying authority for payment hence you are not a residence of the Netherlands.

Please be informed strictly that if you do not have an attorney in the Netherlands and you wish to consult our legal departments to be responsible for the procuring of your Affidavits of lotto claim/Court clearance certificate papers, the processing charges 750 Euros is absolutely not deductible as we have to meet up to the requirements of the paying authority/Netherlands Gaming Board by attaching the court papers issued by the court here in The Netherlands along with the Validation/research report by our Legal department.
The paying authority will be getting more directly to you for immediate remittance of Award prize if you wish.

Endeavor to contact Mr.Edward Coleman on his direct line:0031-621987260 or Email:filepball@netscape.net for details of processing charges remittance.
Otherwise send us an endorsed letter of withdrawal of your winning claim for our record purpose if you wish to decline your winning prize as same will be forward to Bill & Melinda Gates Foundation.

NB: be kind enough to confirm receipt of this Appraisal form and do the needful to enable swift commencement of your winning processing and claim.
Please, fax a copy of the NON RESIDENCE AWARD CLAIM FORM to our office in the United State for confirmation attention to Mr. Patrick Donald
Fax:001-2705889732.
Regards,

Mrs.Brenda Williams.
(Supervisor)

"processment and legal documentation charges" (EUR 928.10)

From: MRS. VERONICA VAN BOSCH [mailto:veronicbosch@netscape.net]
Sent: 27 December 2004 12:50
To: Full Name
Subject: CONGRATULATION!!!


        MACSOFTWARE INTERNATIONAL LOTTERY BV
              Laan Van Hoornwajck 55
              2289 Dg Rijswijck
            Den Haag, The Netherlands
 
 
          
ATTN: 
We are pleased to inform you of the announcement today 27th, December  2004
of winners of the MACSOFTWARE PROMOTION LOTTERY NETHERLANDS /INTERNATIONAL,
PROGRAMS held on 23rd of October 2004. Your email address attached to ticket
number 023-56475130154, drew the lucky numbers6-13-11-42-40-59, batch number
6656/NL and consequently won the lottery in the 1st category. You have
therefore been approved of a lump sum pay out of (EUR500,OOO:00) FIVE
HUNDRED THOUSAND EURO ONLY in credited to file LOTTERY REF NO.
SGIL/763276/03. This is from total prize money of EURO 20,000,000.00 shared
among the seventeen international winners in categories B with serial
number: IL/FLW/12-C033721181.
All participants were selected through a computer ballot system  drawn form
25,000 company email addresses and 30,000,000  individual email addresses
from Australia,Africa, New Zealand, America,  Europe, North America and Asia
as part of International  Promotions Program, which is conducted annually.
CONGRATULATIONS!
Your fund is now in custody of a financial Security company insured in your
FILE REFERENCE. Due to the mix up of some numbers and names, we ask that you
keep this award strictly from public notice until yourClaim has been
processed and your money remitted to your account.This is part of our
security protocol to avoid double claiming or unscrupulous acts by
participants of this program. This lottery program was promoted by our group
of philanthropist headed by the Netherlands government. We hope with a part
of you prize, you Will participate in our end of year high stakes EURO
5,000,000 million International Lottery.
To begin your claim, please contact your file/claim Officer:
MR.WILLIAM  ROBINSON
FOREIGN SERVICE MANAGER
STANDARD SECURITY BV
DEN HAAG, THE NETHERLANDS
EMAIL:macsoftlotter@netscape.net
TEL:+31-627-501-802                                                      
 
Please be informed that NON RESIDENCE of THE NTHERLANDS will be required to
make a NON DEDUCTABLE advance payment of processment and legal documentation
charges of (EUR928.10 Cent) Nine Hundred And Twenty Eight Euro Ten Cent, to
enable our legal department acquire Notorisation papers from the Court prior
to award payment policy as required by the paying Financial Securiry
Company.Please be aware that your Paying Authority will Effect Payment
Swiftly upon satisfactory Report, Verifications and validation provided by
our Processing Agent; that would be designated to your file. For due
processment and remittance of your winning prize to your designated account
of your choice. Remember, all prize money must be claimed not later than
10th of January 2004. After this date, all funds will be returned as
unclaimed. NOTE: In order to avoid unnecessary delays and complications,
please remember to quote your reference.And batch numbers in every one of
your correspondences with your agent. Furthermore, should there be any
change of your address, do inform your claims agent as soon as possible.
Congratulations once again from our team of staff and thank you for being
part of our promotional program. Note: Anybody under the age of 18 is
AUTOMATICALY DISQUALIFIED.
 
And batch numbers in every one of your correspondences with your agent.
Furthermore, should there be any change of your address, do inform your
claims agent as soon as possible. Congratulations once again from our team
of staff and thank you for being part of our promotional program. Note:
Anybody under the age of 18 is AUTOMATICALYDISQUALIFIED. 
 
Yours sincerely,
Mrs.Veronica Van Bosch 
Lottery Coordinator  

"processing and notifying your winning with the High Court of Justice" (EUR 850)

From: "jason van aken" <jasonvanaken@mail2Netherlands.com>
To: <emailaddress>
Sent: Wednesday, 15 December, 2004 2:49
Subject: PAYMENT SCHEME FORM

Attn:Title. Firstname Lastname

We acknowledge receipt of your filled claims form.

We have concluded our verification exercise from the records of the Promoters and have ascertained that you are the rightful winner in this category, Based on this you will have to pay the sum of 850 Euros being cost for processing and notifying your winning with the High Court of Justice and in that process obtain your certificate of winning which will be sent to you.

You are also to fill the attached payment scheme form stating your preferred mode of payment to enable us submits with our records to the Paying Bank.

You are advice to pay this fee with the name of our financial Accountant through western Union Money transfer(Mr. John Blair)AMSTERDAM,THE NETHERLANDS.And send the receipt of payment via email attachment or fax to enable our Accounts department confirm your payment.

Upon receipt of Notarization/processing fee,we shall complete our process by submitting your file in our records with your certificate of winning to our Paying Bank who will effect payment of your winning to your designated Bank Account within 72 Banking Hours.

We await your prompt response.

Best regards,

Mrs.Camera Vanpit,
Feirens Finance BV.

On behalf of

Mr.Jason Van Aken,
Financial Director


_______________________________________________________________
Get the FREE email that has everyone talking at http://www.mail2world.com

The attached Microsoft Word document "PAYMENT SCHEME2(1).rtf" was edited by user "ws04" (Workstation 4?) at company "zainabia internet cafe". It was created on 2004-12-14 and last saved by "B". Here is the (no doubt fake) postal address given in the Word document:

                       FEIRENS FINANCE BV
       DE AMSTERDAM’S PORT BIJLMERPLEIN 888 1102 MG   
    AMSTERDAM  1000 BV AMSTERDAM THE NETHERLANDS        
               TEL: 31-645-808-259   FAX:+31-645-590-445

Received: from [81.70.36.107] by mail2Netherlands.com with HTTP; 12/14/2004 9:49:29 AM PST

     inetnum:      81.70.0.0 - 81.70.127.255
     netname:      EURONET-ADSL
     descr:        Wanadoo Nederland BV
     descr:        Muiderstraat 1
     descr:        1011 PZ Amsterdam
     country:      NL
     admin-c:      EIAR1-RIPE
     tech-c:       EIAR1-RIPE
     status:       ASSIGNED PA
     notify:       registry@euro.net
     mnt-by:       EURONET-MNT
     changed:      registry@euro.net 20030616
     source:       RIPE
     
     route:        81.68.0.0/14
     descr:        EuroNet Internet
     origin:       AS5390
     mnt-by:       EURONET-MNT
     changed:      arjen@euro.net 20020111
     source:       RIPE
     
     role:         EuroNet Internet Administrative Role Account
     address:      Wanadoo Nederland BV (formerly EuroNet Internet BV)
     address:      COD / IKC / Network
     address:      Muiderstraat 1
     address:      1011 PZ Amsterdam
     address:      The Netherlands
     phone:        +31 20 535 5555
     fax-no:       +31 20 535 5400
     e-mail:       eiar1@euro.net
     admin-c:      AW2096-RIPE
     tech-c:       BL78
     tech-c:       PC2773-RIPE
     tech-c:       FB1141-RIPE
     tech-c:       EI89-RIPE
     nic-hdl:      EIAR1-RIPE
     remarks:      In case of abuse issues:
     remarks:      - For WANADOO-CABLE blocks please contact abuse@casema.nl
     remarks:      - For other blocks contact abuse@euronet.nl or abuse@wanadoo.nl
     mnt-by:       EURONET-MNT
     changed:      arjen@euro.net 20011101
     changed:      frans@quanza.net 20030109
     changed:      arjen@euro.net 20030902
     changed:      arjen@euro.net 20040116
     source:       RIPE

Payment instructions:

From: jasonvanaken@netscape.net
To: emailaddress (Name)
Subject: PAYMENT SCHEME FORM

Dear Lucky Winner,

We are in receipt of your claims file,with
REFERENCE NO: 35149/337-5247/LNI and BATCH NO:
Batch Number: 26371545-LNI/2005.Be informed
that we have in our possession instruments of
payment for the sum of 500,000.00 euros to you.
To begin the process of the transfer of your winnings,
You are also to choose any of the options below by
which you would want to be paid:

(a)Telegraphic Transfer
(b) Certified Check

You would also be required to pay the sum of
850.00 Euro (Eight Hundred and fifty Euros),
or it's equivalent in your local Currency.
This payment is to cover transfer charges,
Insurance of vital documents like prize claim
certificate,tax clearance and other transfer documents,
Administrative charges.Payment should be through our
accredited agents WESTERN UNION MONEY TRANSFER as
instructed below and sent to us through email.

NAME ACCOUNTS OFFICER: Mr.John Blair

ADDRESS OF RECEIVER: 1104 KE Port Bijlmerplein
                      Amsterdam,Netherlands.

AMOUNT:               850

CURRENCY:             EURO

Also a Certificate Of Prize Claim Will be sent to
you upon receipt of payment.
Note that your total prize claim of 500,000.00
Euros has been insured to the real value and
as such cannot be deducted from your winnings.
This is in accordance with section 13(1)(n) of
the national gambling act as adopted in 1993 and
amended on 3RD July 1996 by the constitutional
assembly.This Is to protect winners and to avoid
misappropriation of funds.

A certificate  of prize claim along side other
vital documents will be sent to you via Courier
service immediately transfer of your winnings is
effected.Note that your winnings will be transferred
within 48hrs after the receipt of all the
requirements by this company.


Please email or call me if you have any queries.

Best Regards,

Jason Van Aken.


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

From: "Allen Mugenbeni" <mugenbeni@tsamail.co.za>
To: ##############
Sent: Wednesday, 20 October, 2004
Subject: Re: Contract

From: Dr Allen Mugenbeni

Attention:firstname lastname

Dear Friend,

Thank you for your response to my message and your willingness to be of assistance. I have informed my partners of your response we have agreed to bring you into the full picture of the project and how we intend to achieve success.

As I have told you in my first message, I work as a director in the department of mining and energy. A few years back we were mandated to award a multimillion dollar contract to a multinational. Many companies submitted there bids but we awarded it to one to one of multinationals despite that fact that there tender was of higher value. We did this due to the fact we 10% of the total contract sum will be ours.

Ordinarily we would have collected our share a few years back after the final completion of the project but over the few months of relationship with the officials of this multinational, we decided that our money should not be paid with theirs. This we did out of the fear of being backstabbed if the money get to there foreign account.

To this regard, we had an agreement with them to subcontract the 10% less of the total contract sum which is equivalent to our share to another company from whom we would be able to lay claim of our money.

Since then Our money has been lying in a government escrow account unclaimed. We did not want to rush into it waiting for a perfect time to secure the release of this money. December last year the government of my country enacted a new policy in a bid to bolster economic and diplomatic relations with foreign countries. One of the major steps to be taken for the policy to succeed is the reconciliation of debts owed by my government to foreign contractors.

We now saw this as the perfect opportunity to secure the release of our money in a hitch free and risk free procedure in which we would not be breaking the laws of my country and yours. You might wonder why we got into this, a few years back my country got her independence and this saw an end to apartheid which means discrimination of black people in all aspects of life. We thought that the independence of my country was the beginning of a new era but I must tell you. This act still exists widely in my country.

Our position in the social strata is still being degraded. Our worth, quality and income is determined by the color of our skin. Although we are highly placed officials in my government we are poorly paid. Out of our desire to raise our children and those behind us out of this decline in social,educational and moral growth we decided to go into this deal to better our lives and that of our children.

We therefore seek your assistance as regards getting this money out of my country. We have perfected our strategies and this is our assurance to you that the project is 100% risk free as long as you follow our instructions as originators of this project.

Basically, what we need from you is for you to provide us with a good account in which this money will be transferred and also for you to act as a front for us in collecting this money from the government of my country. For us to be able to get this money released we have to follow the proper payment process of contractual obligations.

Firstly I send to you a claims application form which you will fill and send back to me after which we will proceed to register your company name as a corporate entity here in my country. We will also register you as a Category "A" contractor after which we will then proceed with all other contractual validations which will fully back up your claim to this money. After all this have been perfected we will then proceed to pay taxes on your behalf. This tax to be paid is for a period of three preceding years before the award of the contract. Your can imagine how much this will cost as this has to be paid before we can validate the claim. We have made arrangement to cover all the financial aspects of the project and whatever we spend will be remitted back to us from 5% which we have set aside to cover all expenses on both sides to see to the successful completion of the project this expenses include telephone bills.

After we have been able to pay the taxes we will then put finishing touches on the validation process then we will pass on your file to the government of my country for final validation and payment of the said amount. It is at this stage that you will come in as the original contractor who was owed this money. You will act on our behalf while we guide you on what to do and how to go about the project. As we pass on your file to the government payment committee, they will contact you to know whether you are a ghost contractor or not at this stage you will have to liase with them on our behalf as regards the release of the money.

The final validation which will be carried out is the allocation of the exchange control approval number also known as the E.C.A.O No. With this number at hand we have totally achieved success as this is the code number which releases the money from the government account.

After the release of the E.C.A.O No. your presence will be required so as to witness the endorsement ceremony and sign the classified funds release document.As Expirienced people, we know it would be risky and time wasting for the project if you decide to come to my country for this ceremony,As this will raise suspicion due to the fact that it would be clearly visible that you are a total stranger and more questions might be asked from you.Also that project done might recommisioned which will need you to be available with your technical team, so we do not advice this.

On the contrary, an alternative has been put in place by my government,and this is the appointment of a government accredited attorney.When the time come you will apply for this type of attorney to represent you at the endorsement ceremony once the ceremony is successfull,and the attorney has been able to duly endorse all documentations and classified funds release document,the money in question will be transferred to your account within 72 working hours. After this two of my partners will immediately proceed to meet with you in your country to secure the release of the funds and also begin with the sharing while I will stay behind to put finishing touches to the project. I will wait behind to retrieve all documentation relating your name and company name to this deal, then I will come to meet with you for the final sharing and investment of the funds.

Please note, the funds in question after final validation will not be transferred to you as a contract payment but as an advance payment for the importation of goods and services from your country or for some kind of investment as advised by you as we do not want to bring the money back in cash to my country.

We will both have a contractual agreement to secure this. We had this arrangement so as to secure the release of the funds anywhere in the world. The bank from which the funds will emanate from is the reserve bank of south Africa which is the apex in my country. As a top officials we have aides who have assured us this. The telegraphic transfers will be backed up by a high priority telex message stating that the funds is an advance payment not a contractual obligation. This can also be confirmed at anytime by the receiving bank or any monitoring organization.

I will however like you to note that confidentiality is of great importance in this project as this is the only way in which unforeseen circumstances can be imported into this project. The issue of confidentiality cannot be overemphasized, this is due to the nature of the deal and the fact that we do not know who is who especially in the banking sector, that is why we at this stage advice that you forestall any discussions with you banker or anybody at this stage until we state otherwise.

I will await your response for us to begin the project.I will also appreciate you give me a call on 27 733 100012 Thank you and God Bless you while hoping that this will be the beginning of a long lasting relationship between our families.

Best Regards

Dr Allen Mugenbeni

"Cost Of Transfer Charge (C.O.T.)" (EUR 1,500)

The following money demand is from a fake Italian lottery.

From: <funds2000@netscape.net>
To: "recipientname" <recipientaddress>
Sent: Tuesday, 23 November, 2004 22:03
Subject: TRANSFERRING/REMITTING YOUR WINNING

Attn:
Sir/MADAM
We write to acknowledge receipt of a cheque of Five Hundred Thousand Euros(Euros500,000.00)from KASHOUT LOTTERY with you as the beneficiary, be it known to you that the telegraphic remittance process has been concluded and the funds is now ready for immediate telegraphic remittance into your nominated bank account, take note of the following;

As a non citizen of italy we will obtain an affidavit of lottery claim from the ministero della giustizia and your winning certificate from the ministero della finance on your behalf.

Be it known to you that you are obliged to send the Cost Of Transfer Charge (C.O.T.) of ONE Thousand, Five Hundred Euro only (1,500)through any of the westhern union point in your country,PAYABLE to our financial secretary(MRS. MARY NAPOLEON)IN ITALY YOU WILL BE GIVEN A TEN DIGIT NUMBER WHICH YOU WILL EMAIL TO funds2000@netscape.net

Take note also that the C.O.T. Charge is NON-DEDUCTIBLE from your funds, as your funds is PRESENTLY IN A SUSPENSE ACCOUNT with our Bank and withdrawal can not be effected from this SUSPENSE ACCOUNT, the funds has to be remitted into your nominated bank account in full.

Be rest assured that upon receipt of the above requirements i.e. payment of the Cost of Transfer Charge, the funds will be confirmed in your nominated bank account within 78 hours.

Regards,
Mr. Austin Bosch
Online Remittance Director.

"refundable deposit fee" (EUR 820)

The following money demand is from a "LOTTONET LOTTERY INTERNATIONAL", a ficticious Spanish lottery:

PAYMENT INFORMATION
I am directed to inform you,that we have recieved your Document inrespect to prove and identification of your person/information,after due verifications and confirmation of your personal datas,Ref/Batch/Serial/winning ticket number.

Indeed,am glad to inform you that your application has been treated favourably and forwarded to the accounts department for the processing over the release of your fund.

Furthermore,you have been instructed to make a compulsory payment of €820 (EIGHT HUNDRED&TWENTY EUROS ONLY) immediately to us through WESTERN UNION MONEY TRANSFER,directly in the name of the honourary person of ( STONE HARLEN CURTIL:NO_186 PRINCIPE DE VERGARA,MADRID SPAIN )This is the only information you require to make this transfer,to locate the nearest Western Union Money Transfer Payment Office to your place/area,please visit www.westernunion.com . OR by any of the major post offices to locate them.

The need for western union arised following the fact that it is the quickest and fastest paying agent that will enable us recieve your payment €820 within a couple of minutes/hour to enable us proceed with action.

This payment(€820Eurs) is a refundable deposit fees if upon failure or our inability to help secure the release and transfer of your prize winnings(€1,000,000.00 ).This is for the purpose of enhancing and fascilitating the processing and legalisation of your fund(€1,000.000.00) from your email address that had won the prize now into your name personally within the MINISTERY OF INLAND REVENUE AND EXTERNAL AFFAIRS,where approval is needed to be obtainned within 24hours.

Moreover,we have a limited time left on our hands to enable us finalise the processing/legalisation within two days before the dead-line date for claim elapses other-wise,your fund will be returned back into the treasury if we do not meet up on time as scheduled,so please bear with us and act accordingly.

However,we are only a representative/fiducial agent to LOTTONET LOTTERY INTERNATIONAL,this payment(€820) is in line with the European Union Laws binding all winnners,because your money is primarily under a comprehensive insurance cover,which does not allow us/anybody to make any deduction/addition of any fees until it has been finally credited into your personal nominated bank account.

This insurance policy was imposed to protect your funds from any unlawful tampering or theft by any individual,agents,e.t.c until your funds has been transfered to into your account/country.
Again,you are requested to forward to us by scanning as an attachment or by fax(001-270-294-5703) to the international verification department in the (USA) who confirms and stands out as prove of any payment we may have received from you,a copy of your PAYMENT SLIP(820euros)together with the PROCESSING FORM and call us on telephone immediately to ascertain receipt.

Please ensure that every details of your BANKING INFORMATION:are correct, to enable us make an immediate transfer of your fund into your PERSONAL DESIGNATED BANK/ACCOUNT: within 24hours after processing.

We are indeed,truely sorry to make you pass through all this procedures, as we are left with no other option considering the circumstances,rather than to deny you the release of your funds,upon failure of paymen(€820Euros ).

Nevertheless,a Prize Winnings Certificate shall be sent across to you after processing as a guarantee before the transfer of your fund is been effected,this certificate is to stand as prove of the source of the fund which you are about to receive,so that it wont be a problem defending the origin and source of the fund in your country,following the present chain of event happenning around the world related to money laundering,sponsorship of terrorism or drug related business issues.

Once again,congratulations and please do comply in due time to enable us expedite action.

Thanking you for your anticipated co-operation as we hope to hear from you soonest.

Yours Faithfully.
Anthony Edwards
Operations Manager(for)
Management.
+34-661-144-580.
NOTE:YOU MAY FEEL FREE TO CONTACT US ON TELEPHONE FOR ANY FURTHER
CLEARIFICATION/POSSIBLE ASSISTANCE.

"Charges for verification process" (EUR 750)

The following money demand is part from a claims form of a fake Spanish lottery (Makron International Lottery, vsagent3@netscape.net):

Verisign
VERISIGN SECURE AGENT
C/ALCANIZ 48 BAJO.
VALENCIA ESPANA
F/TEL: +346-876-978-48

OUR REF:V.S. ESPANA147/04
DATE:...............
YOUR REF:

APPLICATION FORM6

(...)
DECLARATION

I hereby confirm that the above information is to the best of my knowledge true. Any tempering or falsification of the above data renders this claim null and void. I am informed that Winning is guaranteed insured and non-deductible.

I settle payment 750 Euro against your official Invoice through Western Union Money Transfer as charges for verification process.

Signature of applicant:

"compulsory processing fee" (EUR 550)

The following money demand is from a "Santa Lucia Security" (sanluciaseguros@netscape.net) on behalf of a ficticious Spanish lottery:

ATTN:firstname lastname,
We are pleased to inform you that we have sent to you a procssing form which you shall fill and send back with the lottery winning numbers all this you shall sent to our office and it has been verified to enable us complete the processing of your winning, you are advised to remit the compulsory processing fee of (550euro)Five hundred and fifthy Euros which is in line with the European union law binding all sweepstakes for those outside madrid, Spain.You have to send this fee through the westernunion money transfer on the name of the company's accounting officer ESTHER VACOS.and give us the control number of paymant by email or send your payment reciept through email attachment so as to enable us process your winning immediately.
To locate the closest westernunion money transfer office in your area please log onto (www.westernunion.com)We wish to bring to your notice the factthat the paying bank has instructed us to collect this fee from the lotterywinners because of the primary security hold/insurance cover that is onyour funds which does not allow any deduction of any fees until final credit of your money into your nominated Bank Account.This insurance policy was imposed to protect your funds from any unlawful tampering or theft by any individual until your funds is transfered to your Account.
Upon your payment of this fee,we will send your claim file to the paying Bank.Your refusal to pay this fee is an indication that you are declining to claim the winning offer.
I await your response on this matter and please be aware that the closing date for filing in all claim is fast drawing closer.
Send to us your Banking details such as your full names as it appears in your drivers licence,your Bank Account number,the name and the address of your Bank and the swift code . congratulation once more and feel free to contact me through 0034 669 618 012 for any question bordering you about the processing fees and the promotion in general.
Regards,

Daniel Kruga,
For Santa Lucia Security.
www.santalucia.es


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp

"courier service and insurance" (UKL 405)

The following money demand is from a "Dgcourier Worldwide Express", supposedly delivering a prize from the "California Lottery". Compare this scam with "Alpha Express delivery services", a later version of the same scam most likely sent from Nigeria that also charges £405 and the "UK National Lottery" scam that mentions a courier service that costs £406. Another related scam is "BIZNIZZ COURIER COMPANY".

Also, the IP addresses of the "UK National Lotto" scam email and the "Alpha Express delivery services" scam email are very close: 80.179.242.228 vs. 80.179.242.243 (network Gilat-ART2036).

Dear Customer,

Good day to you. This is to inform you that we are in possession of a certified cheque which is to be couriered to you. The check is for US$10million. You are to please confirm your alternative mailing address to enable us dispatch your parcel immediately. Note that we also do not deliver to P.O.Box address or street corners but to your residence.

It is the usual practice of our organisation to conduct a proper verification of all parcels that we are to deliver to ensure that they are valid. Be rest assured that your check has been confirmed valid and true and delivery will be made once you have met the necessary requirements.

We are a well established company offering courier and transport services 24 hour a day for priority delivery of letters, parcels and consignments to any destination by road, air or sea. We have a substantial team of couriers available for motorcycle despatch plus van driver couriers in all size vehicles from small vans up to 7.5 tonne and international couriers for despatch by road, sea or air.

Your Order number is DGC576543. Description of parcel to be delivered:

An original certificate of weight :-------------0.15kg
Bonded draft of weight :-------------0.17kg
Total weight of parcel :-------------0.32kg
Colour of Parcel :-------------Brown
Length of days :-------------Sameday

Delivery Destination:
Name: victim's name in capital letters
Address: victim's postal address in capital letters

Below are the mandatory administrative charges that you required to pay to enable us courier your certified bank check to you:

Courier charges ............................... 75.00 Pounds
Administrative ...............................110.00 Pounds
Insurance ...............................220.00 Pounds
TOTAL 405.00 Pounds

The charges are a little high because of the insurance cover we have undertaken incase of loss,damage or theft of your highly sensitive document.
We assume all responsibilities incase of any eventualities.

You are to make the payment through Western Union Money Transfer so as to speed up the process of delivery. You are to locate the nearest western union agent to you and make the payment through the name of our accounts officer below:

Mr Simao De Jonge
Rovex House, Hay Hall Rd., Tyseley,
Birmingham. B11 2AG. England

You are to fax this office a copy of the transfer slip. If you do not have a fax machine, just send the following information via email as they appear on the western union transfer slip:

1.Name and address of sender
2.Amount sent
3.Control number(MTCN)
4.Test question and answer if any

You are to send a copy of the evidence of payment to your handling agent as well for confirmation. A receipt of the above payment will be issued to you from our office along with your check.

As soon as we receive confirmation and evidence of payment of the above charges, we will despatch your parcel immediately. The date and time of departure and expected date of delivery will be sent to you. It will take twenty-four hours to get your parcel delivered to you. You will be required to sign for the parcel and to do this, you will need either your international passport as identification or your driver's license.

All orders not delivered within Five(5) working days from this communication will be returned. Please ensure that you confirm your delivery address.

We are glad to be of service to you.

Allen Cole
Customer Services
Dgcourier Services
Rovex House, Hay Hall Rd., Tyseley,
Birmingham. B11 2AG. England
Phone:+44-207 060 0765
Fax:+44-870-136-1230
==========================================================================
"Dgcourier" is a registered and copyright trade marks of :- Dgcourier International Ltd.
==========================================================================
This e-mail and any files transmitted with it are confidential and may be legally privileged and are solely for the individual or entity to whom they are addressed. If you have received this e-mail in error please delete this message and any attachment files, or contact Dgcourier Worldwide Express on Tel: +(44) 2070600765. All business is transacted under our Standard Trading Terms and Conditions a copy of which is available upon request . E .& .O. E . All liability for viruses is excluded to the fullest extent permitted by law.

Here's an email directing a victim to contact this fake company:

Hello Firstname Lastname,

Sorry for the delay in replying you i received your email and have forwarded your winning check of US$1.4million to the courier firm that will handle the delivery. It will be delivered to you within 24hours after you have taken care of the required cost. You were told about the fact that you will handle the cost in my previous mail. You are to proceed to your bank with the check to cash it once you receive it.
You are to contact the courier at once with your full name and address on the requirements to sending your check to you. Below are their contact details:

Dgcourier Services
Rovex House, Hay Hall Rd., Tyseley,
Birmingham. B11 2AG. England
Handling Officer: Mr. Allen Cole
email: admin@dgcourier.org

Details of the required cost will be communicated to you by the courier firm once you contact them. You are to keep me fully informed on all developments.

Sincerely,

Mr. Edward Pinto

"courier service and insurance" (UKL 405 / USD 785.40)
This is virtually the same email as the one sent by "Dgcourier". The source is in Nigeria or one of its neighbour countries, despite the fake UK postal address and the UK voicemailboxes.

Most likely, "Alpha Express delivery services" and "ALPHA PRIVATE BANK UK" are just new labels for "Dgcourier" and "Newcastle Trust Private Bank" from the older scam. Another related scam is "BIZNIZZ COURIER COMPANY".

The IP addresses of the "UK National Lotto" scam email, the "BIZNIZZ Courier Company" and the "Alpha Express delivery services" scam email are very close: 80.179.242.228, 80.179.242.240, 80.179.242.243.

Received: from hotmail.com (bay21-f14.bay21.hotmail.com [65.54.233.103])
	by ##################### (Postfix) with ESMTP id 76F8C25606
	for <#####################>; Thu, 27 Jan 2005 08:56:08 +0100 (CET)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Wed, 26 Jan 2005 23:56:00 -0800
Message-ID: <BAY21-F14B18C979B50D42C39DB2FAC780@phx.gbl>
Received: from 80.179.242.243 by by21fd.bay21.hotmail.msn.com with HTTP;
	Thu, 27 Jan 2005 07:55:39 GMT
X-Originating-IP: [80.179.242.243]
X-Originating-Email: [deliveryservices@alphaexworld.com]
X-Sender: deliveryservices@alphaexworld.com
In-Reply-To: <##################################>
From: "John Walters" <deliveryservices@alphaexworld.com>
To: #####################
Subject: Parcel number AEX97451
Date: Thu, 27 Jan 2005 07:55:39 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 27 Jan 2005 07:56:00.0963 (UTC) FILETIME=[A4891930:01C50445]
Status:  O
X-Mmail: \Recent                                 
X-M-Uid: 1423.1106812574

Dear customer,

Good day to you. This is to inform you that we are in possession of certain 
documents and certified cheques which are to be couriered to you. You are to 
please confirm your mailing address to enable us dispatch your parcel 
immediately.

Note that we also do not deliver to P.O.Box address or street corners but to 
your residence. We are a well established company offering courier and 
transport services 24 hour a day for priority delivery of letters, parcels 
and consignments to any destination. Alpha Express Deliveries with its high 
security storage and network of affiliate security partners and agents 
around the world provide you with storage and specialized courier services 
through which you could send high quality goods like precious stones, art 
crafts and classified commodities to any part of the world.

Your Parcel number is AEX97451. Description of parcel to be delivered:

An original certificate of weight :-------------0.15kg
Bonded draft of weight            :-------------0.17kg
Total weight of parcel            :-------------0.32kg
Colour of Parcel                  :-------------Brown

Delivery Destination:
Name: Firsname lastname
Address: Not confirmed

We do not operate on COD. Below are the mandatory administrative charges 
that you required to pay to enable us courier your certificate of winnings 
as well as your certified bank cheques to you:

Courier charges...............................75.00 Pounds
Administrative ..............................110.00 Pounds
Insurance    ............................... 220.00 Pounds
TOTAL                                        405.00 Pounds (785.40USDollars)

The charges are a little high because of the insurance cover we have 
undertaken incase of loss, damage or theft of your highly sensitive document 
before it gets to you. We assume all responsibilities incase of any 
eventualities.

You are to make the payment through Money Gram money Transfer so as to speed 
up the process of delivery. You are to locate the nearest money gram agent 
to you and make the payment in the name of our accounts officer below:

Mr Lawrence Yolelo
3-4 Abbey Orchard Street, Westminster, SW1P 2JJ

You are to fax this office a copy of the transfer slip. If you do not have a 
fax machine, just send the following information via email as they appear on 
the money gram transfer slip:

1.Name and address of sender
2.Amount sent
3.Reference number

You are to send a copy of the evidence of payment to your handling agent as 
well for confirmation. A receipt of the above payment will be couriered to 
you from our office, along with your winning cheques and certificate.

As soon as we receive confirmation of your address and evidence of payment 
of the above charges, we will dispatch your documents immediately. The date 
and time of departure and expected date of delivery will be sent to you. It 
will take less than fourty eight hours to get your document to you. You will 
be required to sign for the parcel personally. You will be required to 
present a copy of your international passport or your driver's license as 
identification.

All orders not delivered within Five(5) working days from this communication 
will be returned as unclaimed.

We are glad to be of service to you.

Mr John Walters
Customer service
Alpha Express delivery services
3-4 Abbey Orchard Street, Westminster, SW1P 2JJ
Phone:+44-207-060-0353
Fax  :+44-870-831-0812

==========================================================================
"Alpha Express" "Alpha Private Bank" are registered and copyright trade 
marks of :- Alpha Private bank. / Alpha Express Ltd.
==========================================================================
This e-mail and any files transmitted with it are confidential and may be 
legally privileged and are solely for the individual or entity to whom they 
are addressed.If you have received this e-mail in error please delete this 
message and any attachment files, or contact Alpha Express Worldwide. on 
Tel: +(44) 2070600353 . All business is transacted under our Standard 
Trading Terms and Conditions a copy of which is available upon request . All 
liability for viruses is excluded to the fullest extent permitted by law

There's the network for sending IP address 80.179.242.243:
Gilat / Golden Lines is a satellite internet service provider for Nigeria and other West African countries.

     inetnum:      80.179.242.224 - 80.179.242.255
     netname:      Gilat-ART2036
     descr:        Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il
     country:      GB
     admin-c:      DR5299-RIPE
     tech-c:       DR5299-RIPE
     status:       ASSIGNED PA
     notify:       lir@linux.goldenlines.net.il
     changed:      lir@linux.goldenlines.net.il 20040617
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     source:       RIPE
     
     route:        80.179.128.0/17
     descr:        Golden Lines
     origin:       AS9116
     mnt-by:       AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20020711
     source:       RIPE
     
     role:         DNS REG
     address:      25 Hsivim st. Petach-Tiikva, Israel
     e-mail:       dnsreg@012.net.il
     trouble:      abuse@012.net.il
     admin-c:      GE2074-RIPE
     tech-c:       IB737-RIPE
     tech-c:       AG914-RIPE
     nic-hdl:      DR5299-RIPE
     notify:       lir@linux.goldenlines.net.il
     changed:      lir@linux.goldenlines.net.il 20030715
     mnt-by:       AS9116-MNT
     source:       RIPE

Request: alphaexworld.com
connected to whois.melbourneit.com [203.27.227.114:43] ... 

Domain Name.......... alphaexworld.com
  Creation Date........ 2005-01-08
  Registration Date.... 2005-01-08
  Expiry Date.......... 2006-01-08
  Organisation Name.... JOHN WALTERS
  Organisation Address. 45 williams str
  Organisation Address. 
  Organisation Address. new york
  Organisation Address. 10008
  Organisation Address. NY
  Organisation Address. UNITED STATES

Admin Name........... JOHN WALTERS
  Admin Address........ 45 williams str
  Admin Address........ 
  Admin Address........ new york
  Admin Address........ 10008
  Admin Address........ NY
  Admin Address........ UNITED STATES
  Admin Email.......... CUSTOMER@alphaexworld.com
  Admin Phone.......... +1.1534361395375
  Admin Fax............ 

Tech Name............ MSN NOC
  Tech Address......... One Microsoft Way
  Tech Address......... 
  Tech Address......... Redmond
  Tech Address......... 98052
  Tech Address......... WA
  Tech Address......... UNITED STATES
  Tech Email........... MSN-PA-TECH@msn.com
  Tech Phone........... +1.4258828080
  Tech Fax............. 
  Name Server.......... pdomns1.msn.com
  Name Server.......... pdomns2.msn.com

Here is a typical copy an email directing a victim to contact this fake company:

From: "Microsoft Word promotions" <claimsdept@mswordpromotions.com>
To: <emailaddress>
Sent: Wednesday, February 23, 2005 11:02 AM
Subject: Options

Dear Sir/Madam,
We hereby inform you that we have processed your payment and your cheque 
is ready for disbursement.
In this regard you are to choose from the options below that best suites 
you on how you wish to receive your funds.
Also your funds deposited with us is not in liquid form but in Bank 
Cheque, this advice complies with the Anti-Fraud section 2,sub section 
(iv) of the procedural manual of the funds disbursement agreement existing 
between courier companies and the British Government. The options to 
receive your winnings are:
1. Come down in person to collect your funds at our payment center in 
either London or Spain depending on where there is availability of funds. 
You will be required to present a valid International Passport as proof of 
Identification amongst other documentation which will be required by the 
finance house if you choose this option.
2. Have our affiliate courier company send the cheque to our online 
payment center, This is In consonance with our policy in this regard, be 
advised that if you opt for the cheque to be couriered, we however exempts 
ourself from all liability related to this service. The cost of this 
service would be borne by you, this is a prerequisite for this option. You 
will be referred to our affiliate courier company so that you can make 
enquires concerning modalities, and charges. The reason for the courier 
option is for the fact of double taxation, that is if you are to come over 
to sign for the release of your winnings personally, you would have to pay 
taxes on the winnings in UK and then go and pay taxes on the same winnings 
in your country once the funds get there.
In the light of the above you are adviced to choose from the options given 
to you. That is to say if you opt for courier service you are to notify 
this office that we may forward your check and winning certificate per 
your request to courier to the issueing bank.Below are their contact for 
you to open communication with them immediately as regards the 
requirements to sending your check to the payment center. Below are their 
contact
details:

Alpha Express Services, LTD.
Director: Mr John Walters
Email: customer@alphaexworld.com

You are to keep me fully informed on all developments.

Sincerely,

Mr Jack Harold
...........................................................................
This email and its attachments are confidential and intended for the 
exclusive use of the addressee(s). This email and its attachments may also 
be privileged or protected by legal rules. If you have received this by 
mistake please let us know by reply immediately and destroy the email and 
its attachments without reading, copying or forwarding the contents

Similar emails were used in these scams:

• "ROYAL-BAY SECURITY / MR.LARRY FOSTER"
  
• "FREEDOM UNIVERSAL LOTTERY / MEGA JACKPOT LOTTO / Banco Platinum International"

Here is another version of the same scam:

Received: from 192.116.119.135
 by by21fd.bay21.hotmail.msn.com with HTTP;
	Tue, 01 Feb 2005 16:08:55 GMT
X-Originating-IP: [192.116.119.135]
X-Originating-Email: [customer@alphaexworld.com]
X-Sender: customer@alphaexworld.com
In-Reply-To: <####################>
From: "JOHN WALTERS" 
To: ####################
Subject: AEX registered number 3464353
Date: Tue, 01 Feb 2005 16:08:55 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 01 Feb 2005 16:09:00.0740 (UTC) FILETIME=[5785A040:01C50878]
X-Mozilla-Status2: 00000000

Dear Customer,

Goodday to you. This is to inform you that we are in possession of  certain 
documents and certified check which is to be couried to our  online payment 
center that you may open communication with the payment  center as regards 
claiming your funds.

Your AEX registered number: 3464353
Description of parcel to be couriered.

An original certificate of weight....................0.35kg
Bank Cheque ...........................................0.17kg
Total weight of parcel ...............................0.52kg
Colour of parcel .....................................Brown
Lenght of Days .......................................Nextday

Destination of delivery:
NAME OF BANK: Alpha Private Bank
FOREX ALLOCATION MANAGER: Mr Wilson Duncan
TEL: +44-207-060-0383

The bank will contact you after clearing the cheque for onward wire transfer 
to you.
Please find below our charges:

Courier charges ............................. 75.00 Pounds
Administrative ...............................110.00 Pounds
Insurance ...................................220.00 Pounds
TOTAL ...................................405.00 Pounds

You are to make this payment in the name of our accounts officer through 
your local Money Gram money transfer with details below as it is the fastest 
means of receiving your funds and effect despatch of your  package with AEX 
registered number 3464353

ACCOUNT OFFICER: Mr Lawrence Yolelo
                            80 Scrubs Lane London NW10 6RF
                            United Kingdom

After payment you are to fax the receipt of your payment to our office  fax 
number +44-870-130-0043 so that we can collect your funds on your  behalf 
and effect the courier of your documents accordingly. Also  email the 
following information as they appear on the Money Gram transfer slip:

1.Name and address of sender
2.Amount sent
3.Control number
4.Test question and answer if any

Please note that on confirmation of the paid charges, you will be notified 
on the time of the  nextday delivery.

We are glad to be of service to you.

John Walters
Customer Services
Alpha Express Services LTD.
Cumberland House
80 Scrubs Lane
London NW10 6RF
United Kingdom.
Tel: +44-797-992-7630
Fax: +44-870-130-0043

NB.
You are to know that your funds has being insured to its real value as a 
bonded draft and as such cannot be deducted from

     inetnum:      192.116.119.0 - 192.116.119.255
     netname:      GILAT-SATCOM-BLOCK-3
     descr:        Gilat-Satcom
     remarks:      For abuse issues related to Gilat, email abuse-gilat@012.net.il
     notify:       abuse-gilat@012.net.il
     country:      GB
     admin-c:      GS3350-RIPE
     tech-c:       GS3350-RIPE
     status:       ASSIGNED PA
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20050102
     source:       RIPE
     
     route:        192.116.64.0/18
     descr:        Goldenlines
     remarks:      For addressing issues, email lir@linux.goldenlines.net.il
     remarks:      For abuse issues, email abuse@012.net.il
     origin:       AS9116
     mnt-by:       AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20041121
     source:       RIPE
     
     role:         Gilat Support
     address:      Gilat Satcom
     address:      21D Yagia Kapaim st. Petach-Tikva, Israel
     phone:        +972 3 9255000
     fax-no:       +972 3 9217938
     admin-c:      DR5299-RIPE
     admin-c:      GE2074-RIPE
     tech-c:       DR5299-RIPE
     tech-c:       GE2074-RIPE
     trouble:      abuse-gilat@012.net.il
     e-mail:       customer@gilat.net
     nic-hdl:      GS3350-RIPE
     mnt-by:       AS9116-MNT
     changed:      hank@att.net.il 20040909
     source:       RIPE

"courier service" (USD 350)

The real Citibank does not use free webmail accounts such as "mail2banker.com" to send mail to its customers and it doesn't demand payments for non-existent lottery companies by Western Union wire transfer.

From: Citibank of Nigeria Plc <citipayment@mail2banker.com>
To: emailaddress
Sent: Monday, December 13, 2004 11:08 AM
Subject: To Firstname Lastname


CITIBANK NIGERIA PLC

REGIONAL BRANCH OFFICE,
CITI HOUSE IKEJA
5 ALLEN AVENUE IKEJA
LAGOS-NIGERIA
TEL: 234-803-4647600
FAX: 234-1-7598922

EMAIL TO: citipayment@mail2banker.com
EMAIL TO: citiforeignpayment@bankersmail.com


MEMO

From the Desk of: Rev. John Eze

Attention: Firstname Lastname

Winning Number: 7-14-18-23-31-45

I wish to inform you regarding your US$7 Million which we receive instruction from Micro-Soft Lottery which your name is listed among the winners which will receive their payment through the africa region from our bank here Citibank Nigeria Plc .

We want to inform you that you will receive this payment through certified bank Draft and you are requested to come down to Nigeria to pick your certified bank draft, alternatively the draft can be sent to you through Federal Diplomatic post Delivery and you must pay for the cost of sending the draft to you through Courrier service including PTA,the amount is 350 Dollars.

Any beneficiary who cannot be able to visit Nigeria for the collect of his/her draft is requested to pay 350 Dollars through Western Union Money Transfer for the cost of sending the draft to him with PTA

See the information on how to make the payment through western union money transfer with the name of our accounting officer:-

Name: Asheed Adepoju
Address: 29 Burma Road Apapa,Lagos-Nigeria
Text Question: Purpose
Answer: Draft

After the payment, send us the control number (MTCN)with the full name of the sender, you are kindly advised to do that today and that will enable us dispatch your draft.


Reverend John Eze
Manager,
Foreign Operation Unit (F.O.U)
Citibank Nigeria Plc
Ikeja,Lagos-Nigeria.

Working hours: Monday - Friday: 8.00am - 6.00pm
Saturday: 10.00am -2.00pm









_______________________________________________________________
Get the FREE email that has everyone talking at http://www.mail2world.com

From: "Barr Nkosi nkosi" <law_nkosi@yahoo.com>
To: "Lastname, Firstname" <emailaddress>
Date: Fri, 17 Dec 2004 07:20:58 -0500

FROM: Barrister Gerald Nkosi.
ATTN: Title Firstname Lastname.

Madam,

This is to acknowledge the receipt of your mails and
Attached documents of prove. The documents were well
received and I would also like to inform you that this
chambers has carried out her investigations and
confirmation of your documents and beneficiary status
and found out that all the information you passed to
us was correct.

I checked the validity of your inheritance and found
out that Dr. Dredo Deposited these funds with A.D.B
some years ago with your name as his next of
kin/beneficiary of the deposited funds.

The director of the foreign deposit department of
A.D.B informed me that this funds would be sent to the
government as unclaimed before the end of this month
because, no individual has come up as a relative to
Dr. Dredo for the release of the funds. I then
presented the Death certificate of your late uncle to
him and he really sympathized for the death of their
prime customer Dr. Dredo.=20

I made it clear to him that I have been appointed by
your family to apply for the release of this
inheritance because you would not be able to make a
trip for final sign off ceremony and all documentation
from the relevant ministries.

Presently, I would have to file an application on your
behalf for the release of your inheritance and as soon
as it is approved which will take two to three banking
days, the bank will send you a letter of
acknowledgment and confirmation of your receiving Bank
account details where you would like your inheritance
to be swiftly transferred through our Reserve Bank
(Central Bank).

Before we can proceed with the applications, you would
be required by this chamber to make available the
professional service charge of this chamber for us to
commence immensely with the application process.

The official consultations and mobilization fees of
this humble chambers would have to be Ten thousand
five hundred united states dollars (USD 10,500.00) but
you would be required to make available 50% of the
official charge, Five thousand two hundred and fifty
United states dollars (USD 5,250.00) for our
commencement. The remaining balance of the service
charged would be paid upon the receipt and
confirmation of your inheritance into your receiving
bank account.=20

Upon the receipt of your confirmation and willingness
to make the payment, t